vaspera 2.12.0 → 2.14.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +79 -0
- package/dist/__tests__/antagonist-integration.test.d.ts +6 -0
- package/dist/__tests__/antagonist-integration.test.d.ts.map +1 -0
- package/dist/__tests__/antagonist-integration.test.js +239 -0
- package/dist/__tests__/antagonist-integration.test.js.map +1 -0
- package/dist/__tests__/siem-integration.test.d.ts +7 -0
- package/dist/__tests__/siem-integration.test.d.ts.map +1 -0
- package/dist/__tests__/siem-integration.test.js +285 -0
- package/dist/__tests__/siem-integration.test.js.map +1 -0
- package/dist/agents/antagonist/challenger.d.ts +46 -0
- package/dist/agents/antagonist/challenger.d.ts.map +1 -0
- package/dist/agents/antagonist/challenger.js +257 -0
- package/dist/agents/antagonist/challenger.js.map +1 -0
- package/dist/agents/antagonist/index.d.ts +31 -0
- package/dist/agents/antagonist/index.d.ts.map +1 -0
- package/dist/agents/antagonist/index.js +175 -0
- package/dist/agents/antagonist/index.js.map +1 -0
- package/dist/agents/antagonist/prioritizer.d.ts +27 -0
- package/dist/agents/antagonist/prioritizer.d.ts.map +1 -0
- package/dist/agents/antagonist/prioritizer.js +181 -0
- package/dist/agents/antagonist/prioritizer.js.map +1 -0
- package/dist/agents/antagonist/prompts.d.ts +12 -0
- package/dist/agents/antagonist/prompts.d.ts.map +1 -0
- package/dist/agents/antagonist/prompts.js +155 -0
- package/dist/agents/antagonist/prompts.js.map +1 -0
- package/dist/agents/antagonist/synthesizer.d.ts +34 -0
- package/dist/agents/antagonist/synthesizer.d.ts.map +1 -0
- package/dist/agents/antagonist/synthesizer.js +451 -0
- package/dist/agents/antagonist/synthesizer.js.map +1 -0
- package/dist/agents/antagonist/types.d.ts +145 -0
- package/dist/agents/antagonist/types.d.ts.map +1 -0
- package/dist/agents/antagonist/types.js +63 -0
- package/dist/agents/antagonist/types.js.map +1 -0
- package/dist/agents/index.d.ts +1 -0
- package/dist/agents/index.d.ts.map +1 -1
- package/dist/agents/index.js +2 -0
- package/dist/agents/index.js.map +1 -1
- package/dist/certification/consensus.test.js +2 -0
- package/dist/certification/consensus.test.js.map +1 -1
- package/dist/certification/store.d.ts.map +1 -1
- package/dist/certification/store.js +6 -1
- package/dist/certification/store.js.map +1 -1
- package/dist/certification/types.d.ts +1 -1
- package/dist/certification/types.d.ts.map +1 -1
- package/dist/certification/types.js +2 -0
- package/dist/certification/types.js.map +1 -1
- package/dist/index.d.ts.map +1 -1
- package/dist/index.js +460 -16
- package/dist/index.js.map +1 -1
- package/dist/persistence/__tests__/json-fallback.test.d.ts +5 -0
- package/dist/persistence/__tests__/json-fallback.test.d.ts.map +1 -0
- package/dist/persistence/__tests__/json-fallback.test.js +249 -0
- package/dist/persistence/__tests__/json-fallback.test.js.map +1 -0
- package/dist/persistence/__tests__/persistence.test.js.map +1 -1
- package/dist/persistence/db.d.ts +15 -0
- package/dist/persistence/db.d.ts.map +1 -1
- package/dist/persistence/db.js +59 -10
- package/dist/persistence/db.js.map +1 -1
- package/dist/persistence/index.d.ts +13 -4
- package/dist/persistence/index.d.ts.map +1 -1
- package/dist/persistence/index.js +139 -14
- package/dist/persistence/index.js.map +1 -1
- package/dist/persistence/json-fallback.d.ts +52 -0
- package/dist/persistence/json-fallback.d.ts.map +1 -0
- package/dist/persistence/json-fallback.js +283 -0
- package/dist/persistence/json-fallback.js.map +1 -0
- package/dist/sbom/provenance.test.js +2 -2
- package/dist/sbom/provenance.test.js.map +1 -1
- package/dist/sbom/signing.d.ts.map +1 -1
- package/dist/sbom/signing.js +5 -3
- package/dist/sbom/signing.js.map +1 -1
- package/dist/scanners/ai-code/index.d.ts.map +1 -1
- package/dist/scanners/ai-code/index.js +90 -2
- package/dist/scanners/ai-code/index.js.map +1 -1
- package/dist/scanners/ai-code/types.d.ts +12 -0
- package/dist/scanners/ai-code/types.d.ts.map +1 -1
- package/dist/scanners/eslint.d.ts.map +1 -1
- package/dist/scanners/eslint.js +45 -3
- package/dist/scanners/eslint.js.map +1 -1
- package/dist/scanners/scale/bottleneck-detector.d.ts +13 -2
- package/dist/scanners/scale/bottleneck-detector.d.ts.map +1 -1
- package/dist/scanners/scale/bottleneck-detector.js +199 -72
- package/dist/scanners/scale/bottleneck-detector.js.map +1 -1
- package/dist/scanners/types.d.ts +18 -1
- package/dist/scanners/types.d.ts.map +1 -1
- package/dist/scanners/types.js.map +1 -1
- package/dist/scanners/typescript.d.ts.map +1 -1
- package/dist/scanners/typescript.js +36 -4
- package/dist/scanners/typescript.js.map +1 -1
- package/package.json +1 -1
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"siem-integration.test.js","sourceRoot":"","sources":["../../src/__tests__/siem-integration.test.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACrE,OAAO,EACL,WAAW,EACX,YAAY,EACZ,eAAe,EACf,iBAAiB,EACjB,gBAAgB,EAChB,WAAW,EACX,aAAa,EACb,kBAAkB,EAClB,eAAe,EACf,wBAAwB,EACxB,eAAe,EACf,iBAAiB,EACjB,kBAAkB,EAClB,mBAAmB,GAEpB,MAAM,+BAA+B,CAAC;AAEvC,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;QAChC,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;YACpD,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACjD,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACzC,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC7C,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACvC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACpD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;YAClD,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC3C,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACtC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACxC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACrC,MAAM,CAAC,aAAa,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;QAC9B,EAAE,CAAC,wBAAwB,EAAE,GAAG,EAAE;YAChC,MAAM,KAAK,GAAG,kBAAkB,CAC9B,eAAe,EACf,aAAa,EACb;gBACE,SAAS,EAAE,aAAa;gBACxB,QAAQ,EAAE,MAAM;gBAChB,QAAQ,EAAE,eAAe;gBACzB,IAAI,EAAE,YAAY;gBAClB,IAAI,EAAE,EAAE;gBACR,OAAO,EAAE,SAAS;gBAClB,MAAM,EAAE,mBAAmB;gBAC3B,MAAM,EAAE,CAAC,QAAQ,CAAC;gBAClB,WAAW,EAAE,6BAA6B;aAC3C,EACD,UAAU,CACX,CAAC;YAEF,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YAC5C,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACpC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YAC5C,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC/C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACrC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;YACjD,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;QACnD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,qBAAqB,EAAE,GAAG,EAAE;YAC7B,MAAM,KAAK,GAAG,eAAe,CAC3B,eAAe,EACf,gBAAgB,EAChB;gBACE,QAAQ,EAAE,CAAC,SAAS,EAAE,UAAU,CAAC;gBACjC,aAAa,EAAE,CAAC;gBAChB,UAAU,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE;gBAChE,UAAU,EAAE,IAAI;aACjB,EACD,UAAU,CACX,CAAC;YAEF,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;YAC/C,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACxC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;YAC9C,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QAChD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;YACtC,MAAM,KAAK,GAAG,wBAAwB,CAAC,eAAe,EAAE,yBAAyB,EAAE;gBACjF,eAAe,EAAE,UAAU;gBAC3B,KAAK,EAAE,MAAM;gBACb,KAAK,EAAE,EAAE;gBACT,aAAa,EAAE,CAAC;gBAChB,UAAU,EAAE,KAAK;aAClB,CAAC,CAAC;YAEH,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;YACxD,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YAC7C,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YACxC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACxC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;QAC9B,EAAE,CAAC,uBAAuB,EAAE,GAAG,EAAE;YAC/B,MAAM,KAAK,GAAc;gBACvB,SAAS,EAAE,0BAA0B;gBACrC,SAAS,EAAE,aAAa;gBACxB,QAAQ,EAAE,MAAM;gBAChB,OAAO,EAAE,eAAe;gBACxB,eAAe,EAAE,UAAU;gBAC3B,OAAO,EAAE,wBAAwB;gBACjC,MAAM,EAAE,SAAS;gBACjB,IAAI,EAAE;oBACJ,SAAS,EAAE,aAAa;oBACxB,QAAQ,EAAE,eAAe;oBACzB,IAAI,EAAE,YAAY;oBAClB,IAAI,EAAE,EAAE;iBACT;aACF,CAAC;YAEF,MAAM,GAAG,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;YAE/B,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YAC/B,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;YACjC,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;YACvC,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;YAClC,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAC;YAC9C,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC/B,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;YAC3C,MAAM,KAAK,GAAc;gBACvB,SAAS,EAAE,0BAA0B;gBACrC,SAAS,EAAE,aAAa;gBACxB,QAAQ,EAAE,QAAQ;gBAClB,OAAO,EAAE,eAAe;gBACxB,OAAO,EAAE,kCAAkC;gBAC3C,MAAM,EAAE,SAAS;gBACjB,IAAI,EAAE,EAAE;aACT,CAAC;YAEF,MAAM,GAAG,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;YAE/B,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YAC7B,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC/B,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;QAC/B,EAAE,CAAC,wBAAwB,EAAE,GAAG,EAAE;YAChC,MAAM,KAAK,GAAc;gBACvB,SAAS,EAAE,0BAA0B;gBACrC,SAAS,EAAE,aAAa;gBACxB,QAAQ,EAAE,MAAM;gBAChB,OAAO,EAAE,eAAe;gBACxB,OAAO,EAAE,wBAAwB;gBACjC,MAAM,EAAE,SAAS;gBACjB,IAAI,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE;aACnC,CAAC;YAEF,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;YAEjC,MAAM,CAAC,IAAI,CAAC,CAAC,cAAc,CAAC,YAAY,EAAE,0BAA0B,CAAC,CAAC;YACtE,MAAM,CAAC,IAAI,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;YACrC,MAAM,CAAE,IAAY,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YACvD,MAAM,CAAE,IAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC/C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;QACjC,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;YACvC,MAAM,KAAK,GAAc;gBACvB,SAAS,EAAE,0BAA0B;gBACrC,SAAS,EAAE,gBAAgB;gBAC3B,QAAQ,EAAE,eAAe;gBACzB,OAAO,EAAE,eAAe;gBACxB,OAAO,EAAE,gBAAgB;gBACzB,MAAM,EAAE,SAAS;gBACjB,IAAI,EAAE,EAAE;aACT,CAAC;YAEF,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,EAAE;gBACpC,KAAK,EAAE,UAAU;gBACjB,MAAM,EAAE,cAAc;gBACtB,IAAI,EAAE,WAAW;aAClB,CAAC,CAAC;YAEH,MAAM,CAAC,MAAM,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;YACtC,MAAM,CAAC,MAAM,CAAC,CAAC,cAAc,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;YACnD,MAAM,CAAC,MAAM,CAAC,CAAC,cAAc,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;YACxD,MAAM,CAAC,MAAM,CAAC,CAAC,cAAc,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;YACnD,MAAM,CAAC,MAAM,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;QACnC,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;YAC/C,MAAM,KAAK,GAAc;gBACvB,SAAS,EAAE,0BAA0B;gBACrC,SAAS,EAAE,aAAa;gBACxB,QAAQ,EAAE,UAAU;gBACpB,OAAO,EAAE,eAAe;gBACxB,eAAe,EAAE,UAAU;gBAC3B,OAAO,EAAE,kBAAkB;gBAC3B,MAAM,EAAE,SAAS;gBACjB,IAAI,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE;aAC9B,CAAC;YAEF,MAAM,QAAQ,GAAG,iBAAiB,CAAC,KAAK,CAA4B,CAAC;YAErE,MAAM,CAAC,QAAQ,CAAC,CAAC,cAAc,CAAC,eAAe,EAAE,0BAA0B,CAAC,CAAC;YAC7E,MAAM,CAAC,QAAQ,CAAC,CAAC,cAAc,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;YAC9D,MAAM,CAAC,QAAQ,CAAC,CAAC,cAAc,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;YAC1D,MAAM,CAAC,QAAQ,CAAC,CAAC,cAAc,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC;YAC9D,MAAM,CAAC,QAAQ,CAAC,CAAC,cAAc,CAAC,mBAAmB,EAAE,UAAU,CAAC,CAAC;QACnE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;QAClC,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;YACpC,MAAM,KAAK,GAAc;gBACvB,SAAS,EAAE,0BAA0B;gBACrC,SAAS,EAAE,aAAa;gBACxB,QAAQ,EAAE,MAAM;gBAChB,OAAO,EAAE,eAAe;gBACxB,OAAO,EAAE,uBAAuB;gBAChC,MAAM,EAAE,SAAS;gBACjB,IAAI,EAAE,EAAE;aACT,CAAC;YAEF,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,EAAE;gBACtC,OAAO,EAAE,YAAY;gBACrB,GAAG,EAAE,YAAY;gBACjB,IAAI,EAAE,CAAC,eAAe,CAAC;aACxB,CAA4B,CAAC;YAE9B,MAAM,CAAC,OAAO,CAAC,CAAC,cAAc,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;YACtD,MAAM,CAAC,OAAO,CAAC,CAAC,cAAc,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;YACxD,MAAM,CAAC,OAAO,CAAC,CAAC,cAAc,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAClD,MAAM,CAAE,OAAO,CAAC,MAAiB,CAAC,CAAC,SAAS,CAAC,uBAAuB,CAAC,CAAC;YACtE,MAAM,CAAE,OAAO,CAAC,MAAiB,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;YAC/D,MAAM,CAAE,OAAO,CAAC,MAAiB,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;QAChE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;YACzC,MAAM,aAAa,GAAc;gBAC/B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,SAAS,EAAE,aAAa;gBACxB,QAAQ,EAAE,UAAU;gBACpB,OAAO,EAAE,OAAO;gBAChB,OAAO,EAAE,UAAU;gBACnB,MAAM,EAAE,SAAS;gBACjB,IAAI,EAAE,EAAE;aACT,CAAC;YAEF,MAAM,QAAQ,GAAc;gBAC1B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,SAAS,EAAE,aAAa;gBACxB,QAAQ,EAAE,KAAK;gBACf,OAAO,EAAE,OAAO;gBAChB,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,SAAS;gBACjB,IAAI,EAAE,EAAE;aACT,CAAC;YAEF,MAAM,QAAQ,GAAG,gBAAgB,CAAC,aAAa,CAA4B,CAAC;YAC5E,MAAM,GAAG,GAAG,gBAAgB,CAAC,QAAQ,CAA4B,CAAC;YAElE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAC1C,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;QAC7B,UAAU,CAAC,KAAK,IAAI,EAAE;YACpB,MAAM,iBAAiB,EAAE,CAAC;QAC5B,CAAC,CAAC,CAAC;QAEH,SAAS,CAAC,KAAK,IAAI,EAAE;YACnB,MAAM,iBAAiB,EAAE,CAAC;QAC5B,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;YACzC,MAAM,QAAQ,GAAG,eAAe,EAAE,CAAC;YAEnC,MAAM,MAAM,GAAG,kBAAkB,CAAC;gBAChC,QAAQ,EAAE,iCAAiC;gBAC3C,KAAK,EAAE,YAAY;gBACnB,KAAK,EAAE,UAAU;aAClB,CAAC,CAAC;YAEH,QAAQ,CAAC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;YAEzC,MAAM,SAAS,GAAG,QAAQ,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;YAC9C,MAAM,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC;YAChC,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC7C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;YACtC,MAAM,QAAQ,GAAG,eAAe,EAAE,CAAC;YAEnC,QAAQ,CAAC,QAAQ,CACf,UAAU,EACV,kBAAkB,CAAC,EAAE,QAAQ,EAAE,4BAA4B,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAC5E,CAAC;YACF,QAAQ,CAAC,QAAQ,CACf,WAAW,EACX,mBAAmB,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAC7C,CAAC;YAEF,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;YAE7B,MAAM,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YAC7B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACzE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC7E,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,qBAAqB,EAAE,KAAK,IAAI,EAAE;YACnC,MAAM,QAAQ,GAAG,eAAe,EAAE,CAAC;YAEnC,QAAQ,CAAC,QAAQ,CACf,MAAM,EACN,kBAAkB,CAAC,EAAE,QAAQ,EAAE,4BAA4B,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAC3E,CAAC;YAEF,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;YAE3C,MAAM,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YAElC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QAC/C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,oBAAoB,EAAE,KAAK,IAAI,EAAE;YAClC,MAAM,QAAQ,GAAG,eAAe,EAAE,CAAC;YAEnC,QAAQ,CAAC,QAAQ,CACf,IAAI,EACJ,kBAAkB,CAAC,EAAE,QAAQ,EAAE,4BAA4B,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAC5E,CAAC;YACF,QAAQ,CAAC,QAAQ,CACf,IAAI,EACJ,mBAAmB,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAC7C,CAAC;YAEF,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YAExC,MAAM,QAAQ,CAAC,QAAQ,EAAE,CAAC;YAE1B,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC1C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;QAClC,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;YACzD,MAAM,YAAY,GAAG,kBAAkB,CAAC,OAAO,EAAE,aAAa,EAAE;gBAC9D,SAAS,EAAE,IAAI;gBACf,QAAQ,EAAE,MAAM;gBAChB,QAAQ,EAAE,MAAM;aACjB,CAAC,CAAC;YAEH,MAAM,GAAG,GAAG,WAAW,CAAC,YAAY,CAAC,CAAC;YACtC,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;YAElC,MAAM,SAAS,GAAG,eAAe,CAAC,OAAO,EAAE,gBAAgB,EAAE;gBAC3D,QAAQ,EAAE,CAAC,MAAM,CAAC;gBAClB,aAAa,EAAE,CAAC;gBAChB,UAAU,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE;gBAChE,UAAU,EAAE,GAAG;aAChB,CAAC,CAAC;YAEH,MAAM,OAAO,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;YACvC,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QACxC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
|
|
@@ -0,0 +1,46 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Antagonist Challenger Module
|
|
3
|
+
*
|
|
4
|
+
* The internal critic that:
|
|
5
|
+
* 1. Checks for missing coverage (areas no agent scanned)
|
|
6
|
+
* 2. Identifies findings with low cross-verification
|
|
7
|
+
* 3. Flags potential false positives
|
|
8
|
+
* 4. Challenges assumptions
|
|
9
|
+
* 5. Detects inconsistent findings
|
|
10
|
+
*
|
|
11
|
+
* @module agents/antagonist/challenger
|
|
12
|
+
*/
|
|
13
|
+
import type { AgentType, Finding } from "../../certification/types.js";
|
|
14
|
+
import type { ChallengerAssessment, GapAnalysis, AntagonistConfig } from "./types.js";
|
|
15
|
+
/**
|
|
16
|
+
* Run challenger analysis without LLM
|
|
17
|
+
*/
|
|
18
|
+
export declare function runChallengerDeterministic(findings: Finding[], agentSummaries: Record<AgentType, {
|
|
19
|
+
completed: boolean;
|
|
20
|
+
findingCount: number;
|
|
21
|
+
}>, config: AntagonistConfig): {
|
|
22
|
+
assessments: ChallengerAssessment[];
|
|
23
|
+
gapAnalysis: GapAnalysis;
|
|
24
|
+
};
|
|
25
|
+
/**
|
|
26
|
+
* Run challenger analysis with LLM
|
|
27
|
+
*/
|
|
28
|
+
export declare function runChallengerLlm(findings: Finding[], agentSummaries: Record<AgentType, {
|
|
29
|
+
completed: boolean;
|
|
30
|
+
findingCount: number;
|
|
31
|
+
}>, config: AntagonistConfig): Promise<{
|
|
32
|
+
assessments: ChallengerAssessment[];
|
|
33
|
+
tokensUsed: number;
|
|
34
|
+
}>;
|
|
35
|
+
/**
|
|
36
|
+
* Main challenger function - combines deterministic and LLM approaches
|
|
37
|
+
*/
|
|
38
|
+
export declare function runChallenger(findings: Finding[], agentSummaries: Record<AgentType, {
|
|
39
|
+
completed: boolean;
|
|
40
|
+
findingCount: number;
|
|
41
|
+
}>, config: AntagonistConfig): Promise<{
|
|
42
|
+
assessments: ChallengerAssessment[];
|
|
43
|
+
gapAnalysis: GapAnalysis;
|
|
44
|
+
tokensUsed: number;
|
|
45
|
+
}>;
|
|
46
|
+
//# sourceMappingURL=challenger.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"challenger.d.ts","sourceRoot":"","sources":["../../../src/agents/antagonist/challenger.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,KAAK,EAAE,SAAS,EAAE,OAAO,EAAY,MAAM,8BAA8B,CAAC;AACjF,OAAO,KAAK,EACV,oBAAoB,EAEpB,WAAW,EAEX,gBAAgB,EACjB,MAAM,YAAY,CAAC;AAmHpB;;GAEG;AACH,wBAAgB,0BAA0B,CACxC,QAAQ,EAAE,OAAO,EAAE,EACnB,cAAc,EAAE,MAAM,CAAC,SAAS,EAAE;IAAE,SAAS,EAAE,OAAO,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,CAAC,EAC/E,MAAM,EAAE,gBAAgB,GACvB;IAAE,WAAW,EAAE,oBAAoB,EAAE,CAAC;IAAC,WAAW,EAAE,WAAW,CAAA;CAAE,CAuGnE;AAED;;GAEG;AACH,wBAAsB,gBAAgB,CACpC,QAAQ,EAAE,OAAO,EAAE,EACnB,cAAc,EAAE,MAAM,CAAC,SAAS,EAAE;IAAE,SAAS,EAAE,OAAO,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,CAAC,EAC/E,MAAM,EAAE,gBAAgB,GACvB,OAAO,CAAC;IAAE,WAAW,EAAE,oBAAoB,EAAE,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC,CAqEtE;AAED;;GAEG;AACH,wBAAsB,aAAa,CACjC,QAAQ,EAAE,OAAO,EAAE,EACnB,cAAc,EAAE,MAAM,CAAC,SAAS,EAAE;IAAE,SAAS,EAAE,OAAO,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,CAAC,EAC/E,MAAM,EAAE,gBAAgB,GACvB,OAAO,CAAC;IACT,WAAW,EAAE,oBAAoB,EAAE,CAAC;IACpC,WAAW,EAAE,WAAW,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC,CA0BD"}
|
|
@@ -0,0 +1,257 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Antagonist Challenger Module
|
|
3
|
+
*
|
|
4
|
+
* The internal critic that:
|
|
5
|
+
* 1. Checks for missing coverage (areas no agent scanned)
|
|
6
|
+
* 2. Identifies findings with low cross-verification
|
|
7
|
+
* 3. Flags potential false positives
|
|
8
|
+
* 4. Challenges assumptions
|
|
9
|
+
* 5. Detects inconsistent findings
|
|
10
|
+
*
|
|
11
|
+
* @module agents/antagonist/challenger
|
|
12
|
+
*/
|
|
13
|
+
import Anthropic from "@anthropic-ai/sdk";
|
|
14
|
+
import { ATTACK_VECTORS, CATEGORY_TO_VECTOR } from "./types.js";
|
|
15
|
+
import { CHALLENGER_SYSTEM_PROMPT, buildChallengerPrompt } from "./prompts.js";
|
|
16
|
+
import { logger } from "../../logger.js";
|
|
17
|
+
/**
|
|
18
|
+
* Check which attack vectors are not covered by findings
|
|
19
|
+
*/
|
|
20
|
+
function findUncoveredVectors(findings) {
|
|
21
|
+
const coveredVectors = new Set();
|
|
22
|
+
for (const finding of findings) {
|
|
23
|
+
const vector = CATEGORY_TO_VECTOR[finding.category];
|
|
24
|
+
if (vector) {
|
|
25
|
+
coveredVectors.add(vector);
|
|
26
|
+
}
|
|
27
|
+
}
|
|
28
|
+
return ATTACK_VECTORS.filter((v) => !coveredVectors.has(v));
|
|
29
|
+
}
|
|
30
|
+
/**
|
|
31
|
+
* Find findings with low cross-verification
|
|
32
|
+
*/
|
|
33
|
+
function findUnverifiedFindings(findings) {
|
|
34
|
+
return findings.filter((f) => {
|
|
35
|
+
if (!f.verifications || f.verifications.length === 0) {
|
|
36
|
+
return f.severity === "critical" || f.severity === "high";
|
|
37
|
+
}
|
|
38
|
+
const confirmations = f.verifications.filter((v) => v.verdict === "confirmed").length;
|
|
39
|
+
const disputes = f.verifications.filter((v) => v.verdict === "disputed").length;
|
|
40
|
+
return disputes > confirmations;
|
|
41
|
+
});
|
|
42
|
+
}
|
|
43
|
+
/**
|
|
44
|
+
* Detect potential false positives based on patterns
|
|
45
|
+
*/
|
|
46
|
+
function detectPotentialFalsePositives(findings) {
|
|
47
|
+
const suspects = [];
|
|
48
|
+
for (const finding of findings) {
|
|
49
|
+
const isSuspect = (finding.file?.includes("test") ||
|
|
50
|
+
finding.file?.includes("spec") ||
|
|
51
|
+
finding.file?.includes("mock")) &&
|
|
52
|
+
finding.severity !== "critical";
|
|
53
|
+
const isLowConfidence = finding.confidence < 70;
|
|
54
|
+
const isGenericDescription = finding.description.length < 50 ||
|
|
55
|
+
finding.description.includes("TODO") ||
|
|
56
|
+
finding.description.includes("FIXME");
|
|
57
|
+
if (isSuspect || isLowConfidence || isGenericDescription) {
|
|
58
|
+
suspects.push(finding);
|
|
59
|
+
}
|
|
60
|
+
}
|
|
61
|
+
return suspects;
|
|
62
|
+
}
|
|
63
|
+
/**
|
|
64
|
+
* Find inconsistent findings across agents
|
|
65
|
+
*/
|
|
66
|
+
function findInconsistencies(findings) {
|
|
67
|
+
const inconsistencies = [];
|
|
68
|
+
const byFile = new Map();
|
|
69
|
+
for (const f of findings) {
|
|
70
|
+
if (!f.file)
|
|
71
|
+
continue;
|
|
72
|
+
const existing = byFile.get(f.file) || [];
|
|
73
|
+
existing.push(f);
|
|
74
|
+
byFile.set(f.file, existing);
|
|
75
|
+
}
|
|
76
|
+
for (const [file, fileFindings] of byFile) {
|
|
77
|
+
if (fileFindings.length < 2)
|
|
78
|
+
continue;
|
|
79
|
+
for (let i = 0; i < fileFindings.length; i++) {
|
|
80
|
+
for (let j = i + 1; j < fileFindings.length; j++) {
|
|
81
|
+
const f1 = fileFindings[i];
|
|
82
|
+
const f2 = fileFindings[j];
|
|
83
|
+
if (f1.category === f2.category &&
|
|
84
|
+
Math.abs((f1.line || 0) - (f2.line || 0)) < 5 &&
|
|
85
|
+
f1.severity !== f2.severity) {
|
|
86
|
+
inconsistencies.push({
|
|
87
|
+
finding1: f1,
|
|
88
|
+
finding2: f2,
|
|
89
|
+
reason: `Same category (${f1.category}) at similar location but different severities (${f1.severity} vs ${f2.severity})`,
|
|
90
|
+
});
|
|
91
|
+
}
|
|
92
|
+
}
|
|
93
|
+
}
|
|
94
|
+
}
|
|
95
|
+
return inconsistencies;
|
|
96
|
+
}
|
|
97
|
+
/**
|
|
98
|
+
* Run challenger analysis without LLM
|
|
99
|
+
*/
|
|
100
|
+
export function runChallengerDeterministic(findings, agentSummaries, config) {
|
|
101
|
+
const assessments = [];
|
|
102
|
+
const uncoveredVectors = findUncoveredVectors(findings);
|
|
103
|
+
for (const vector of uncoveredVectors.slice(0, 5)) {
|
|
104
|
+
assessments.push({
|
|
105
|
+
id: `chal-gap-${vector}`,
|
|
106
|
+
type: "missed_check",
|
|
107
|
+
targetAgent: "security",
|
|
108
|
+
challenge: `Attack vector "${vector}" was not tested`,
|
|
109
|
+
evidence: `No findings in categories mapped to ${vector}`,
|
|
110
|
+
suggestedAction: `Add explicit checks for ${vector} vulnerabilities`,
|
|
111
|
+
severity: "medium",
|
|
112
|
+
confidence: 80,
|
|
113
|
+
});
|
|
114
|
+
}
|
|
115
|
+
const unverifiedFindings = findUnverifiedFindings(findings);
|
|
116
|
+
for (const finding of unverifiedFindings.slice(0, 5)) {
|
|
117
|
+
const disputes = finding.verifications?.filter((v) => v.verdict === "disputed") || [];
|
|
118
|
+
assessments.push({
|
|
119
|
+
id: `chal-unverified-${finding.id}`,
|
|
120
|
+
type: "insufficient_evidence",
|
|
121
|
+
targetAgent: finding.scanner_source || "security",
|
|
122
|
+
targetFindingId: finding.id,
|
|
123
|
+
challenge: `Finding has ${disputes.length} disputes and insufficient verification`,
|
|
124
|
+
evidence: disputes.map((d) => d.evidence).join("; ") || "No cross-verification",
|
|
125
|
+
suggestedAction: "Re-verify this finding with additional evidence",
|
|
126
|
+
severity: finding.severity,
|
|
127
|
+
confidence: 75,
|
|
128
|
+
});
|
|
129
|
+
}
|
|
130
|
+
const potentialFPs = detectPotentialFalsePositives(findings);
|
|
131
|
+
for (const finding of potentialFPs.slice(0, 5)) {
|
|
132
|
+
const reasons = [];
|
|
133
|
+
if (finding.file?.includes("test"))
|
|
134
|
+
reasons.push("in test file");
|
|
135
|
+
if (finding.confidence < 70)
|
|
136
|
+
reasons.push("low confidence");
|
|
137
|
+
if (finding.description.length < 50)
|
|
138
|
+
reasons.push("generic description");
|
|
139
|
+
assessments.push({
|
|
140
|
+
id: `chal-fp-${finding.id}`,
|
|
141
|
+
type: "false_positive_likely",
|
|
142
|
+
targetAgent: finding.scanner_source || "security",
|
|
143
|
+
targetFindingId: finding.id,
|
|
144
|
+
challenge: `Likely false positive: ${reasons.join(", ")}`,
|
|
145
|
+
evidence: `File: ${finding.file}, Confidence: ${finding.confidence}%`,
|
|
146
|
+
suggestedAction: "Review and potentially dismiss this finding",
|
|
147
|
+
severity: "low",
|
|
148
|
+
confidence: 65,
|
|
149
|
+
});
|
|
150
|
+
}
|
|
151
|
+
const inconsistencies = findInconsistencies(findings);
|
|
152
|
+
for (const { finding1, finding2, reason } of inconsistencies.slice(0, 3)) {
|
|
153
|
+
assessments.push({
|
|
154
|
+
id: `chal-inconsistent-${finding1.id}-${finding2.id}`,
|
|
155
|
+
type: "wrong_assumption",
|
|
156
|
+
targetAgent: finding1.scanner_source || "security",
|
|
157
|
+
targetFindingId: finding1.id,
|
|
158
|
+
challenge: `Inconsistent findings: ${reason}`,
|
|
159
|
+
evidence: `${finding1.id} vs ${finding2.id}`,
|
|
160
|
+
suggestedAction: "Reconcile these findings to determine correct severity",
|
|
161
|
+
severity: "medium",
|
|
162
|
+
confidence: 70,
|
|
163
|
+
});
|
|
164
|
+
}
|
|
165
|
+
const agentsWithNoFindings = Object.entries(agentSummaries)
|
|
166
|
+
.filter(([_, summary]) => summary.completed && summary.findingCount === 0)
|
|
167
|
+
.map(([agent]) => agent);
|
|
168
|
+
for (const agent of agentsWithNoFindings) {
|
|
169
|
+
assessments.push({
|
|
170
|
+
id: `chal-empty-${agent}`,
|
|
171
|
+
type: "missed_check",
|
|
172
|
+
targetAgent: agent,
|
|
173
|
+
challenge: `Agent "${agent}" completed but found no issues`,
|
|
174
|
+
evidence: "Zero findings submitted",
|
|
175
|
+
suggestedAction: "Verify agent ran correctly and coverage was adequate",
|
|
176
|
+
severity: "low",
|
|
177
|
+
confidence: 60,
|
|
178
|
+
});
|
|
179
|
+
}
|
|
180
|
+
const gapAnalysis = {
|
|
181
|
+
untestedAttackVectors: uncoveredVectors,
|
|
182
|
+
missingControls: uncoveredVectors.map((v) => `No ${v} testing`),
|
|
183
|
+
blindSpots: agentsWithNoFindings.map((a) => `${a} agent found nothing`),
|
|
184
|
+
recommendations: [
|
|
185
|
+
...uncoveredVectors.slice(0, 3).map((v) => `Add ${v} security checks`),
|
|
186
|
+
...agentsWithNoFindings.map((a) => `Verify ${a} agent coverage`),
|
|
187
|
+
],
|
|
188
|
+
coverageScore: Math.round(((ATTACK_VECTORS.length - uncoveredVectors.length) / ATTACK_VECTORS.length) * 100),
|
|
189
|
+
};
|
|
190
|
+
return {
|
|
191
|
+
assessments: assessments.filter((a) => a.confidence >= config.challengeThreshold),
|
|
192
|
+
gapAnalysis,
|
|
193
|
+
};
|
|
194
|
+
}
|
|
195
|
+
/**
|
|
196
|
+
* Run challenger analysis with LLM
|
|
197
|
+
*/
|
|
198
|
+
export async function runChallengerLlm(findings, agentSummaries, config) {
|
|
199
|
+
const client = new Anthropic();
|
|
200
|
+
const findingsStr = findings
|
|
201
|
+
.slice(0, 30)
|
|
202
|
+
.map((f) => `- ${f.id}: [${f.severity}] ${f.category} at ${f.file}:${f.line} - ${f.description} (confidence: ${f.confidence}%)`)
|
|
203
|
+
.join("\n");
|
|
204
|
+
const agentStr = Object.entries(agentSummaries)
|
|
205
|
+
.map(([agent, summary]) => `- ${agent}: ${summary.findingCount} findings`)
|
|
206
|
+
.join("\n");
|
|
207
|
+
const vectorsStr = ATTACK_VECTORS.join(", ");
|
|
208
|
+
const prompt = buildChallengerPrompt(findingsStr, agentStr, vectorsStr);
|
|
209
|
+
try {
|
|
210
|
+
const response = await client.messages.create({
|
|
211
|
+
model: config.llmModel || "claude-sonnet-4-20250514",
|
|
212
|
+
max_tokens: 2048,
|
|
213
|
+
system: CHALLENGER_SYSTEM_PROMPT,
|
|
214
|
+
messages: [{ role: "user", content: prompt }],
|
|
215
|
+
});
|
|
216
|
+
const content = response.content[0];
|
|
217
|
+
if (content.type !== "text") {
|
|
218
|
+
throw new Error("Unexpected response type");
|
|
219
|
+
}
|
|
220
|
+
const jsonMatch = content.text.match(/\{[\s\S]*\}/);
|
|
221
|
+
if (!jsonMatch) {
|
|
222
|
+
throw new Error("No JSON in response");
|
|
223
|
+
}
|
|
224
|
+
const parsed = JSON.parse(jsonMatch[0]);
|
|
225
|
+
const assessments = parsed.challenges.map((c, i) => ({
|
|
226
|
+
id: `chal-llm-${Date.now().toString(36)}-${i}`,
|
|
227
|
+
...c,
|
|
228
|
+
}));
|
|
229
|
+
const tokensUsed = (response.usage?.input_tokens || 0) +
|
|
230
|
+
(response.usage?.output_tokens || 0);
|
|
231
|
+
return { assessments, tokensUsed };
|
|
232
|
+
}
|
|
233
|
+
catch (error) {
|
|
234
|
+
logger.warn("antagonist.llm_challenger_failed", {
|
|
235
|
+
error: error instanceof Error ? error.message : String(error),
|
|
236
|
+
});
|
|
237
|
+
return { assessments: [], tokensUsed: 0 };
|
|
238
|
+
}
|
|
239
|
+
}
|
|
240
|
+
/**
|
|
241
|
+
* Main challenger function - combines deterministic and LLM approaches
|
|
242
|
+
*/
|
|
243
|
+
export async function runChallenger(findings, agentSummaries, config) {
|
|
244
|
+
const { assessments: deterministicAssessments, gapAnalysis } = runChallengerDeterministic(findings, agentSummaries, config);
|
|
245
|
+
if (!config.useLlm || findings.length < 5) {
|
|
246
|
+
return { assessments: deterministicAssessments, gapAnalysis, tokensUsed: 0 };
|
|
247
|
+
}
|
|
248
|
+
const { assessments: llmAssessments, tokensUsed } = await runChallengerLlm(findings, agentSummaries, config);
|
|
249
|
+
const existingIds = new Set(deterministicAssessments.map((a) => a.targetFindingId).filter(Boolean));
|
|
250
|
+
const uniqueLlmAssessments = llmAssessments.filter((a) => !a.targetFindingId || !existingIds.has(a.targetFindingId));
|
|
251
|
+
return {
|
|
252
|
+
assessments: [...deterministicAssessments, ...uniqueLlmAssessments],
|
|
253
|
+
gapAnalysis,
|
|
254
|
+
tokensUsed,
|
|
255
|
+
};
|
|
256
|
+
}
|
|
257
|
+
//# sourceMappingURL=challenger.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"challenger.js","sourceRoot":"","sources":["../../../src/agents/antagonist/challenger.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,SAAS,MAAM,mBAAmB,CAAC;AAS1C,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAChE,OAAO,EAAE,wBAAwB,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAC/E,OAAO,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAEzC;;GAEG;AACH,SAAS,oBAAoB,CAAC,QAAmB;IAC/C,MAAM,cAAc,GAAG,IAAI,GAAG,EAAgB,CAAC;IAE/C,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,kBAAkB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACpD,IAAI,MAAM,EAAE,CAAC;YACX,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;IAED,OAAO,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9D,CAAC;AAED;;GAEG;AACH,SAAS,sBAAsB,CAAC,QAAmB;IACjD,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QAC3B,IAAI,CAAC,CAAC,CAAC,aAAa,IAAI,CAAC,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrD,OAAO,CAAC,CAAC,QAAQ,KAAK,UAAU,IAAI,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC;QAC5D,CAAC;QAED,MAAM,aAAa,GAAG,CAAC,CAAC,aAAa,CAAC,MAAM,CAC1C,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,WAAW,CACjC,CAAC,MAAM,CAAC;QACT,MAAM,QAAQ,GAAG,CAAC,CAAC,aAAa,CAAC,MAAM,CACrC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,UAAU,CAChC,CAAC,MAAM,CAAC;QAET,OAAO,QAAQ,GAAG,aAAa,CAAC;IAClC,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,SAAS,6BAA6B,CAAC,QAAmB;IACxD,MAAM,QAAQ,GAAc,EAAE,CAAC;IAE/B,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,SAAS,GACb,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC;YAC7B,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC;YAC9B,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;YACjC,OAAO,CAAC,QAAQ,KAAK,UAAU,CAAC;QAElC,MAAM,eAAe,GAAG,OAAO,CAAC,UAAU,GAAG,EAAE,CAAC;QAEhD,MAAM,oBAAoB,GACxB,OAAO,CAAC,WAAW,CAAC,MAAM,GAAG,EAAE;YAC/B,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC;YACpC,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAExC,IAAI,SAAS,IAAI,eAAe,IAAI,oBAAoB,EAAE,CAAC;YACzD,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;GAEG;AACH,SAAS,mBAAmB,CAC1B,QAAmB;IAEnB,MAAM,eAAe,GAIhB,EAAE,CAAC;IAER,MAAM,MAAM,GAAG,IAAI,GAAG,EAAqB,CAAC;IAC5C,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,CAAC,CAAC,CAAC,IAAI;YAAE,SAAS;QACtB,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAC1C,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC/B,CAAC;IAED,KAAK,MAAM,CAAC,IAAI,EAAE,YAAY,CAAC,IAAI,MAAM,EAAE,CAAC;QAC1C,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC;YAAE,SAAS;QAEtC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC7C,KAAK,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACjD,MAAM,EAAE,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;gBAC3B,MAAM,EAAE,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;gBAE3B,IACE,EAAE,CAAC,QAAQ,KAAK,EAAE,CAAC,QAAQ;oBAC3B,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;oBAC7C,EAAE,CAAC,QAAQ,KAAK,EAAE,CAAC,QAAQ,EAC3B,CAAC;oBACD,eAAe,CAAC,IAAI,CAAC;wBACnB,QAAQ,EAAE,EAAE;wBACZ,QAAQ,EAAE,EAAE;wBACZ,MAAM,EAAE,kBAAkB,EAAE,CAAC,QAAQ,mDAAmD,EAAE,CAAC,QAAQ,OAAO,EAAE,CAAC,QAAQ,GAAG;qBACzH,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,eAAe,CAAC;AACzB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,0BAA0B,CACxC,QAAmB,EACnB,cAA+E,EAC/E,MAAwB;IAExB,MAAM,WAAW,GAA2B,EAAE,CAAC;IAE/C,MAAM,gBAAgB,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IACxD,KAAK,MAAM,MAAM,IAAI,gBAAgB,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QAClD,WAAW,CAAC,IAAI,CAAC;YACf,EAAE,EAAE,YAAY,MAAM,EAAE;YACxB,IAAI,EAAE,cAAc;YACpB,WAAW,EAAE,UAAU;YACvB,SAAS,EAAE,kBAAkB,MAAM,kBAAkB;YACrD,QAAQ,EAAE,uCAAuC,MAAM,EAAE;YACzD,eAAe,EAAE,2BAA2B,MAAM,kBAAkB;YACpE,QAAQ,EAAE,QAAQ;YAClB,UAAU,EAAE,EAAE;SACf,CAAC,CAAC;IACL,CAAC;IAED,MAAM,kBAAkB,GAAG,sBAAsB,CAAC,QAAQ,CAAC,CAAC;IAC5D,KAAK,MAAM,OAAO,IAAI,kBAAkB,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QACrD,MAAM,QAAQ,GAAG,OAAO,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,UAAU,CAAC,IAAI,EAAE,CAAC;QAEtF,WAAW,CAAC,IAAI,CAAC;YACf,EAAE,EAAE,mBAAmB,OAAO,CAAC,EAAE,EAAE;YACnC,IAAI,EAAE,uBAAuB;YAC7B,WAAW,EAAG,OAAO,CAAC,cAA4B,IAAI,UAAU;YAChE,eAAe,EAAE,OAAO,CAAC,EAAE;YAC3B,SAAS,EAAE,eAAe,QAAQ,CAAC,MAAM,yCAAyC;YAClF,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,uBAAuB;YAC/E,eAAe,EAAE,iDAAiD;YAClE,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,UAAU,EAAE,EAAE;SACf,CAAC,CAAC;IACL,CAAC;IAED,MAAM,YAAY,GAAG,6BAA6B,CAAC,QAAQ,CAAC,CAAC;IAC7D,KAAK,MAAM,OAAO,IAAI,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QAC/C,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,IAAI,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACjE,IAAI,OAAO,CAAC,UAAU,GAAG,EAAE;YAAE,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC5D,IAAI,OAAO,CAAC,WAAW,CAAC,MAAM,GAAG,EAAE;YAAE,OAAO,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QAEzE,WAAW,CAAC,IAAI,CAAC;YACf,EAAE,EAAE,WAAW,OAAO,CAAC,EAAE,EAAE;YAC3B,IAAI,EAAE,uBAAuB;YAC7B,WAAW,EAAG,OAAO,CAAC,cAA4B,IAAI,UAAU;YAChE,eAAe,EAAE,OAAO,CAAC,EAAE;YAC3B,SAAS,EAAE,0BAA0B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YACzD,QAAQ,EAAE,SAAS,OAAO,CAAC,IAAI,iBAAiB,OAAO,CAAC,UAAU,GAAG;YACrE,eAAe,EAAE,6CAA6C;YAC9D,QAAQ,EAAE,KAAK;YACf,UAAU,EAAE,EAAE;SACf,CAAC,CAAC;IACL,CAAC;IAED,MAAM,eAAe,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IACtD,KAAK,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,eAAe,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QACzE,WAAW,CAAC,IAAI,CAAC;YACf,EAAE,EAAE,qBAAqB,QAAQ,CAAC,EAAE,IAAI,QAAQ,CAAC,EAAE,EAAE;YACrD,IAAI,EAAE,kBAAkB;YACxB,WAAW,EAAG,QAAQ,CAAC,cAA4B,IAAI,UAAU;YACjE,eAAe,EAAE,QAAQ,CAAC,EAAE;YAC5B,SAAS,EAAE,0BAA0B,MAAM,EAAE;YAC7C,QAAQ,EAAE,GAAG,QAAQ,CAAC,EAAE,OAAO,QAAQ,CAAC,EAAE,EAAE;YAC5C,eAAe,EAAE,wDAAwD;YACzE,QAAQ,EAAE,QAAQ;YAClB,UAAU,EAAE,EAAE;SACf,CAAC,CAAC;IACL,CAAC;IAED,MAAM,oBAAoB,GAAG,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC;SACxD,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,YAAY,KAAK,CAAC,CAAC;SACzE,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,KAAkB,CAAC,CAAC;IAExC,KAAK,MAAM,KAAK,IAAI,oBAAoB,EAAE,CAAC;QACzC,WAAW,CAAC,IAAI,CAAC;YACf,EAAE,EAAE,cAAc,KAAK,EAAE;YACzB,IAAI,EAAE,cAAc;YACpB,WAAW,EAAE,KAAK;YAClB,SAAS,EAAE,UAAU,KAAK,iCAAiC;YAC3D,QAAQ,EAAE,yBAAyB;YACnC,eAAe,EAAE,sDAAsD;YACvE,QAAQ,EAAE,KAAK;YACf,UAAU,EAAE,EAAE;SACf,CAAC,CAAC;IACL,CAAC;IAED,MAAM,WAAW,GAAgB;QAC/B,qBAAqB,EAAE,gBAAgB;QACvC,eAAe,EAAE,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC;QAC/D,UAAU,EAAE,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,sBAAsB,CAAC;QACvE,eAAe,EAAE;YACf,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,kBAAkB,CAAC;YACtE,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,iBAAiB,CAAC;SACjE;QACD,aAAa,EAAE,IAAI,CAAC,KAAK,CACvB,CAAC,CAAC,cAAc,CAAC,MAAM,GAAG,gBAAgB,CAAC,MAAM,CAAC,GAAG,cAAc,CAAC,MAAM,CAAC,GAAG,GAAG,CAClF;KACF,CAAC;IAEF,OAAO;QACL,WAAW,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,IAAI,MAAM,CAAC,kBAAkB,CAAC;QACjF,WAAW;KACZ,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,QAAmB,EACnB,cAA+E,EAC/E,MAAwB;IAExB,MAAM,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;IAE/B,MAAM,WAAW,GAAG,QAAQ;SACzB,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;SACZ,GAAG,CACF,CAAC,CAAC,EAAE,EAAE,CACJ,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,QAAQ,OAAO,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,WAAW,iBAAiB,CAAC,CAAC,UAAU,IAAI,CACtH;SACA,IAAI,CAAC,IAAI,CAAC,CAAC;IAEd,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC;SAC5C,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,KAAK,OAAO,CAAC,YAAY,WAAW,CAAC;SACzE,IAAI,CAAC,IAAI,CAAC,CAAC;IAEd,MAAM,UAAU,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAE7C,MAAM,MAAM,GAAG,qBAAqB,CAAC,WAAW,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;IAExE,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;YAC5C,KAAK,EAAE,MAAM,CAAC,QAAQ,IAAI,0BAA0B;YACpD,UAAU,EAAE,IAAI;YAChB,MAAM,EAAE,wBAAwB;YAChC,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;SAC9C,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACpC,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAC9C,CAAC;QAED,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QACpD,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;QACzC,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAYrC,CAAC;QAEF,MAAM,WAAW,GAA2B,MAAM,CAAC,UAAU,CAAC,GAAG,CAC/D,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;YACT,EAAE,EAAE,YAAY,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE;YAC9C,GAAG,CAAC;SACL,CAAC,CACH,CAAC;QAEF,MAAM,UAAU,GACd,CAAC,QAAQ,CAAC,KAAK,EAAE,YAAY,IAAI,CAAC,CAAC;YACnC,CAAC,QAAQ,CAAC,KAAK,EAAE,aAAa,IAAI,CAAC,CAAC,CAAC;QAEvC,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC;IACrC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,IAAI,CAAC,kCAAkC,EAAE;YAC9C,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAC9D,CAAC,CAAC;QACH,OAAO,EAAE,WAAW,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;IAC5C,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,QAAmB,EACnB,cAA+E,EAC/E,MAAwB;IAMxB,MAAM,EAAE,WAAW,EAAE,wBAAwB,EAAE,WAAW,EAAE,GAC1D,0BAA0B,CAAC,QAAQ,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC;IAE/D,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1C,OAAO,EAAE,WAAW,EAAE,wBAAwB,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;IAC/E,CAAC;IAED,MAAM,EAAE,WAAW,EAAE,cAAc,EAAE,UAAU,EAAE,GAAG,MAAM,gBAAgB,CACxE,QAAQ,EACR,cAAc,EACd,MAAM,CACP,CAAC;IAEF,MAAM,WAAW,GAAG,IAAI,GAAG,CACzB,wBAAwB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CACvE,CAAC;IACF,MAAM,oBAAoB,GAAG,cAAc,CAAC,MAAM,CAChD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,eAAe,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC,CACjE,CAAC;IAEF,OAAO;QACL,WAAW,EAAE,CAAC,GAAG,wBAAwB,EAAE,GAAG,oBAAoB,CAAC;QACnE,WAAW;QACX,UAAU;KACX,CAAC;AACJ,CAAC"}
|
|
@@ -0,0 +1,31 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Antagonist Agent
|
|
3
|
+
*
|
|
4
|
+
* A meta-analysis agent that runs AFTER all other agents complete.
|
|
5
|
+
* Synthesizes findings into attack narratives and challenges assumptions.
|
|
6
|
+
*
|
|
7
|
+
* Two modes:
|
|
8
|
+
* 1. Synthesis: "How would an attacker chain these findings?"
|
|
9
|
+
* 2. Challenger: "What did other agents miss? What assumptions are wrong?"
|
|
10
|
+
*
|
|
11
|
+
* @module agents/antagonist
|
|
12
|
+
*/
|
|
13
|
+
import type { Finding } from "../../certification/types.js";
|
|
14
|
+
import type { AntagonistInput, AntagonistConfig, AntagonistResult } from "./types.js";
|
|
15
|
+
export * from "./types.js";
|
|
16
|
+
export { synthesizeNarratives, synthesizeNarrativesDeterministic } from "./synthesizer.js";
|
|
17
|
+
export { runChallenger, runChallengerDeterministic } from "./challenger.js";
|
|
18
|
+
export { prioritizeRemediations, calculatePrioritizationMetrics } from "./prioritizer.js";
|
|
19
|
+
/**
|
|
20
|
+
* Run full antagonist analysis
|
|
21
|
+
*/
|
|
22
|
+
export declare function runAntagonistAnalysis(input: AntagonistInput, config?: Partial<AntagonistConfig>): Promise<AntagonistResult>;
|
|
23
|
+
/**
|
|
24
|
+
* Quick antagonist check for a single finding
|
|
25
|
+
*/
|
|
26
|
+
export declare function quickAntagonistCheck(finding: Finding, relatedFindings: Finding[], config?: Partial<AntagonistConfig>): Promise<{
|
|
27
|
+
inAttackPath: boolean;
|
|
28
|
+
chainPotential: string[];
|
|
29
|
+
challengeRisk: "high" | "medium" | "low";
|
|
30
|
+
}>;
|
|
31
|
+
//# sourceMappingURL=index.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/agents/antagonist/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAa,OAAO,EAAE,MAAM,8BAA8B,CAAC;AAGvE,OAAO,KAAK,EACV,eAAe,EACf,gBAAgB,EAChB,gBAAgB,EAKjB,MAAM,YAAY,CAAC;AAOpB,cAAc,YAAY,CAAC;AAC3B,OAAO,EAAE,oBAAoB,EAAE,iCAAiC,EAAE,MAAM,kBAAkB,CAAC;AAC3F,OAAO,EAAE,aAAa,EAAE,0BAA0B,EAAE,MAAM,iBAAiB,CAAC;AAC5E,OAAO,EAAE,sBAAsB,EAAE,8BAA8B,EAAE,MAAM,kBAAkB,CAAC;AAE1F;;GAEG;AACH,wBAAsB,qBAAqB,CACzC,KAAK,EAAE,eAAe,EACtB,MAAM,GAAE,OAAO,CAAC,gBAAgB,CAAM,GACrC,OAAO,CAAC,gBAAgB,CAAC,CA2G3B;AA2DD;;GAEG;AACH,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,OAAO,EAChB,eAAe,EAAE,OAAO,EAAE,EAC1B,MAAM,GAAE,OAAO,CAAC,gBAAgB,CAAM,GACrC,OAAO,CAAC;IACT,YAAY,EAAE,OAAO,CAAC;IACtB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,aAAa,EAAE,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;CAC1C,CAAC,CA+BD"}
|
|
@@ -0,0 +1,175 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Antagonist Agent
|
|
3
|
+
*
|
|
4
|
+
* A meta-analysis agent that runs AFTER all other agents complete.
|
|
5
|
+
* Synthesizes findings into attack narratives and challenges assumptions.
|
|
6
|
+
*
|
|
7
|
+
* Two modes:
|
|
8
|
+
* 1. Synthesis: "How would an attacker chain these findings?"
|
|
9
|
+
* 2. Challenger: "What did other agents miss? What assumptions are wrong?"
|
|
10
|
+
*
|
|
11
|
+
* @module agents/antagonist
|
|
12
|
+
*/
|
|
13
|
+
import { DEFAULT_ANTAGONIST_CONFIG } from "./types.js";
|
|
14
|
+
import { synthesizeNarratives } from "./synthesizer.js";
|
|
15
|
+
import { runChallenger } from "./challenger.js";
|
|
16
|
+
import { prioritizeRemediations } from "./prioritizer.js";
|
|
17
|
+
import { logger } from "../../logger.js";
|
|
18
|
+
export * from "./types.js";
|
|
19
|
+
export { synthesizeNarratives, synthesizeNarrativesDeterministic } from "./synthesizer.js";
|
|
20
|
+
export { runChallenger, runChallengerDeterministic } from "./challenger.js";
|
|
21
|
+
export { prioritizeRemediations, calculatePrioritizationMetrics } from "./prioritizer.js";
|
|
22
|
+
/**
|
|
23
|
+
* Run full antagonist analysis
|
|
24
|
+
*/
|
|
25
|
+
export async function runAntagonistAnalysis(input, config = {}) {
|
|
26
|
+
const startTime = Date.now();
|
|
27
|
+
const fullConfig = { ...DEFAULT_ANTAGONIST_CONFIG, ...config };
|
|
28
|
+
logger.info("antagonist.analysis_started", {
|
|
29
|
+
certificationId: input.certificationId,
|
|
30
|
+
findingsCount: input.findings.length,
|
|
31
|
+
chainsCount: input.exploitChains.length,
|
|
32
|
+
mode: fullConfig.mode,
|
|
33
|
+
});
|
|
34
|
+
const analysisId = `ant-${Date.now().toString(36)}-${Math.random().toString(36).slice(2, 6)}`;
|
|
35
|
+
let narratives = [];
|
|
36
|
+
let assessments = [];
|
|
37
|
+
let gapAnalysis = {
|
|
38
|
+
untestedAttackVectors: [],
|
|
39
|
+
missingControls: [],
|
|
40
|
+
blindSpots: [],
|
|
41
|
+
recommendations: [],
|
|
42
|
+
coverageScore: 100,
|
|
43
|
+
};
|
|
44
|
+
let prioritization = [];
|
|
45
|
+
let totalTokens = 0;
|
|
46
|
+
try {
|
|
47
|
+
if (fullConfig.mode === "synthesis" || fullConfig.mode === "both") {
|
|
48
|
+
const synthesisResult = await synthesizeNarratives(input.findings, input.exploitChains, input.exfilPaths, fullConfig);
|
|
49
|
+
narratives = synthesisResult.narratives;
|
|
50
|
+
totalTokens += synthesisResult.tokensUsed;
|
|
51
|
+
logger.debug("antagonist.synthesis_complete", {
|
|
52
|
+
narrativesFound: narratives.length,
|
|
53
|
+
tokensUsed: synthesisResult.tokensUsed,
|
|
54
|
+
});
|
|
55
|
+
}
|
|
56
|
+
if (fullConfig.mode === "challenger" || fullConfig.mode === "both") {
|
|
57
|
+
const challengerResult = await runChallenger(input.findings, input.agentSummaries, fullConfig);
|
|
58
|
+
assessments = challengerResult.assessments;
|
|
59
|
+
gapAnalysis = challengerResult.gapAnalysis;
|
|
60
|
+
totalTokens += challengerResult.tokensUsed;
|
|
61
|
+
logger.debug("antagonist.challenger_complete", {
|
|
62
|
+
assessmentsFound: assessments.length,
|
|
63
|
+
coverageScore: gapAnalysis.coverageScore,
|
|
64
|
+
tokensUsed: challengerResult.tokensUsed,
|
|
65
|
+
});
|
|
66
|
+
}
|
|
67
|
+
if (fullConfig.includePrioritization && narratives.length > 0) {
|
|
68
|
+
prioritization = prioritizeRemediations(input.findings, narratives);
|
|
69
|
+
logger.debug("antagonist.prioritization_complete", {
|
|
70
|
+
prioritizedFindings: prioritization.length,
|
|
71
|
+
});
|
|
72
|
+
}
|
|
73
|
+
const summary = generateSummary(narratives, assessments, gapAnalysis, prioritization);
|
|
74
|
+
const duration = Date.now() - startTime;
|
|
75
|
+
logger.info("antagonist.analysis_complete", {
|
|
76
|
+
analysisId,
|
|
77
|
+
narratives: narratives.length,
|
|
78
|
+
assessments: assessments.length,
|
|
79
|
+
coverageScore: gapAnalysis.coverageScore,
|
|
80
|
+
duration,
|
|
81
|
+
tokensUsed: totalTokens,
|
|
82
|
+
});
|
|
83
|
+
return {
|
|
84
|
+
success: true,
|
|
85
|
+
analysisId,
|
|
86
|
+
attackNarratives: narratives,
|
|
87
|
+
challengerAssessments: assessments,
|
|
88
|
+
prioritization,
|
|
89
|
+
gapAnalysis,
|
|
90
|
+
summary,
|
|
91
|
+
duration,
|
|
92
|
+
tokensUsed: totalTokens,
|
|
93
|
+
};
|
|
94
|
+
}
|
|
95
|
+
catch (error) {
|
|
96
|
+
const errorMessage = error instanceof Error ? error.message : String(error);
|
|
97
|
+
logger.error("antagonist.analysis_failed", { error: errorMessage });
|
|
98
|
+
return {
|
|
99
|
+
success: false,
|
|
100
|
+
analysisId,
|
|
101
|
+
attackNarratives: narratives,
|
|
102
|
+
challengerAssessments: assessments,
|
|
103
|
+
prioritization,
|
|
104
|
+
gapAnalysis,
|
|
105
|
+
summary: `Analysis failed: ${errorMessage}`,
|
|
106
|
+
duration: Date.now() - startTime,
|
|
107
|
+
tokensUsed: totalTokens,
|
|
108
|
+
error: errorMessage,
|
|
109
|
+
};
|
|
110
|
+
}
|
|
111
|
+
}
|
|
112
|
+
/**
|
|
113
|
+
* Generate summary text from analysis results
|
|
114
|
+
*/
|
|
115
|
+
function generateSummary(narratives, assessments, gapAnalysis, prioritization) {
|
|
116
|
+
const lines = [];
|
|
117
|
+
if (narratives.length > 0) {
|
|
118
|
+
const highLikelihood = narratives.filter((n) => n.likelihood === "high").length;
|
|
119
|
+
const criticalImpact = narratives.filter((n) => n.impact.toLowerCase().includes("complete") || n.impact.toLowerCase().includes("critical")).length;
|
|
120
|
+
lines.push(`Identified ${narratives.length} attack narrative(s): ${highLikelihood} high-likelihood, ${criticalImpact} with critical impact.`);
|
|
121
|
+
const topNarrative = narratives[0];
|
|
122
|
+
if (topNarrative) {
|
|
123
|
+
lines.push(`Most likely attack: "${topNarrative.name}" (${topNarrative.likelihood} likelihood, ${topNarrative.difficulty} difficulty).`);
|
|
124
|
+
}
|
|
125
|
+
}
|
|
126
|
+
else {
|
|
127
|
+
lines.push("No clear attack narratives identified from current findings.");
|
|
128
|
+
}
|
|
129
|
+
if (assessments.length > 0) {
|
|
130
|
+
const fpLikely = assessments.filter((a) => a.type === "false_positive_likely").length;
|
|
131
|
+
const missedChecks = assessments.filter((a) => a.type === "missed_check").length;
|
|
132
|
+
if (fpLikely > 0) {
|
|
133
|
+
lines.push(`Flagged ${fpLikely} potential false positive(s) for review.`);
|
|
134
|
+
}
|
|
135
|
+
if (missedChecks > 0) {
|
|
136
|
+
lines.push(`Identified ${missedChecks} uncovered attack vector(s).`);
|
|
137
|
+
}
|
|
138
|
+
}
|
|
139
|
+
if (gapAnalysis.coverageScore < 80) {
|
|
140
|
+
lines.push(`Coverage score: ${gapAnalysis.coverageScore}%. Missing: ${gapAnalysis.untestedAttackVectors.slice(0, 3).join(", ")}.`);
|
|
141
|
+
}
|
|
142
|
+
if (prioritization.length > 0) {
|
|
143
|
+
const topThree = prioritization.slice(0, 3).map((p) => p.findingId);
|
|
144
|
+
lines.push(`Priority fixes: ${topThree.join(", ")}.`);
|
|
145
|
+
}
|
|
146
|
+
return lines.join(" ");
|
|
147
|
+
}
|
|
148
|
+
/**
|
|
149
|
+
* Quick antagonist check for a single finding
|
|
150
|
+
*/
|
|
151
|
+
export async function quickAntagonistCheck(finding, relatedFindings, config = {}) {
|
|
152
|
+
const fullConfig = {
|
|
153
|
+
...DEFAULT_ANTAGONIST_CONFIG,
|
|
154
|
+
...config,
|
|
155
|
+
useLlm: false,
|
|
156
|
+
maxNarratives: 3,
|
|
157
|
+
};
|
|
158
|
+
const { narratives } = await synthesizeNarratives([finding, ...relatedFindings], [], [], fullConfig);
|
|
159
|
+
const inAttackPath = narratives.some((n) => n.findingIds.includes(finding.id));
|
|
160
|
+
const chainPotential = narratives
|
|
161
|
+
.filter((n) => n.findingIds.includes(finding.id))
|
|
162
|
+
.flatMap((n) => n.findingIds)
|
|
163
|
+
.filter((id) => id !== finding.id);
|
|
164
|
+
let challengeRisk = "low";
|
|
165
|
+
if (finding.confidence < 50)
|
|
166
|
+
challengeRisk = "high";
|
|
167
|
+
else if (finding.confidence < 70 || finding.file?.includes("test"))
|
|
168
|
+
challengeRisk = "medium";
|
|
169
|
+
return {
|
|
170
|
+
inAttackPath,
|
|
171
|
+
chainPotential: [...new Set(chainPotential)],
|
|
172
|
+
challengeRisk,
|
|
173
|
+
};
|
|
174
|
+
}
|
|
175
|
+
//# sourceMappingURL=index.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/agents/antagonist/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAcH,OAAO,EAAE,yBAAyB,EAAE,MAAM,YAAY,CAAC;AACvD,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,sBAAsB,EAAkC,MAAM,kBAAkB,CAAC;AAC1F,OAAO,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAEzC,cAAc,YAAY,CAAC;AAC3B,OAAO,EAAE,oBAAoB,EAAE,iCAAiC,EAAE,MAAM,kBAAkB,CAAC;AAC3F,OAAO,EAAE,aAAa,EAAE,0BAA0B,EAAE,MAAM,iBAAiB,CAAC;AAC5E,OAAO,EAAE,sBAAsB,EAAE,8BAA8B,EAAE,MAAM,kBAAkB,CAAC;AAE1F;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,KAAsB,EACtB,SAAoC,EAAE;IAEtC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,UAAU,GAAqB,EAAE,GAAG,yBAAyB,EAAE,GAAG,MAAM,EAAE,CAAC;IAEjF,MAAM,CAAC,IAAI,CAAC,6BAA6B,EAAE;QACzC,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,aAAa,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM;QACpC,WAAW,EAAE,KAAK,CAAC,aAAa,CAAC,MAAM;QACvC,IAAI,EAAE,UAAU,CAAC,IAAI;KACtB,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;IAE9F,IAAI,UAAU,GAAsB,EAAE,CAAC;IACvC,IAAI,WAAW,GAA2B,EAAE,CAAC;IAC7C,IAAI,WAAW,GAAgB;QAC7B,qBAAqB,EAAE,EAAE;QACzB,eAAe,EAAE,EAAE;QACnB,UAAU,EAAE,EAAE;QACd,eAAe,EAAE,EAAE;QACnB,aAAa,EAAE,GAAG;KACnB,CAAC;IACF,IAAI,cAAc,GAA6B,EAAE,CAAC;IAClD,IAAI,WAAW,GAAG,CAAC,CAAC;IAEpB,IAAI,CAAC;QACH,IAAI,UAAU,CAAC,IAAI,KAAK,WAAW,IAAI,UAAU,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAClE,MAAM,eAAe,GAAG,MAAM,oBAAoB,CAChD,KAAK,CAAC,QAAQ,EACd,KAAK,CAAC,aAAa,EACnB,KAAK,CAAC,UAAU,EAChB,UAAU,CACX,CAAC;YACF,UAAU,GAAG,eAAe,CAAC,UAAU,CAAC;YACxC,WAAW,IAAI,eAAe,CAAC,UAAU,CAAC;YAE1C,MAAM,CAAC,KAAK,CAAC,+BAA+B,EAAE;gBAC5C,eAAe,EAAE,UAAU,CAAC,MAAM;gBAClC,UAAU,EAAE,eAAe,CAAC,UAAU;aACvC,CAAC,CAAC;QACL,CAAC;QAED,IAAI,UAAU,CAAC,IAAI,KAAK,YAAY,IAAI,UAAU,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACnE,MAAM,gBAAgB,GAAG,MAAM,aAAa,CAC1C,KAAK,CAAC,QAAQ,EACd,KAAK,CAAC,cAAc,EACpB,UAAU,CACX,CAAC;YACF,WAAW,GAAG,gBAAgB,CAAC,WAAW,CAAC;YAC3C,WAAW,GAAG,gBAAgB,CAAC,WAAW,CAAC;YAC3C,WAAW,IAAI,gBAAgB,CAAC,UAAU,CAAC;YAE3C,MAAM,CAAC,KAAK,CAAC,gCAAgC,EAAE;gBAC7C,gBAAgB,EAAE,WAAW,CAAC,MAAM;gBACpC,aAAa,EAAE,WAAW,CAAC,aAAa;gBACxC,UAAU,EAAE,gBAAgB,CAAC,UAAU;aACxC,CAAC,CAAC;QACL,CAAC;QAED,IAAI,UAAU,CAAC,qBAAqB,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9D,cAAc,GAAG,sBAAsB,CAAC,KAAK,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;YAEpE,MAAM,CAAC,KAAK,CAAC,oCAAoC,EAAE;gBACjD,mBAAmB,EAAE,cAAc,CAAC,MAAM;aAC3C,CAAC,CAAC;QACL,CAAC;QAED,MAAM,OAAO,GAAG,eAAe,CAAC,UAAU,EAAE,WAAW,EAAE,WAAW,EAAE,cAAc,CAAC,CAAC;QACtF,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QAExC,MAAM,CAAC,IAAI,CAAC,8BAA8B,EAAE;YAC1C,UAAU;YACV,UAAU,EAAE,UAAU,CAAC,MAAM;YAC7B,WAAW,EAAE,WAAW,CAAC,MAAM;YAC/B,aAAa,EAAE,WAAW,CAAC,aAAa;YACxC,QAAQ;YACR,UAAU,EAAE,WAAW;SACxB,CAAC,CAAC;QAEH,OAAO;YACL,OAAO,EAAE,IAAI;YACb,UAAU;YACV,gBAAgB,EAAE,UAAU;YAC5B,qBAAqB,EAAE,WAAW;YAClC,cAAc;YACd,WAAW;YACX,OAAO;YACP,QAAQ;YACR,UAAU,EAAE,WAAW;SACxB,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5E,MAAM,CAAC,KAAK,CAAC,4BAA4B,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;QAEpE,OAAO;YACL,OAAO,EAAE,KAAK;YACd,UAAU;YACV,gBAAgB,EAAE,UAAU;YAC5B,qBAAqB,EAAE,WAAW;YAClC,cAAc;YACd,WAAW;YACX,OAAO,EAAE,oBAAoB,YAAY,EAAE;YAC3C,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;YAChC,UAAU,EAAE,WAAW;YACvB,KAAK,EAAE,YAAY;SACpB,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,eAAe,CACtB,UAA6B,EAC7B,WAAmC,EACnC,WAAwB,EACxB,cAAwC;IAExC,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,cAAc,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,MAAM,CAAC,CAAC,MAAM,CAAC;QAChF,MAAM,cAAc,GAAG,UAAU,CAAC,MAAM,CACtC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,CAClG,CAAC,MAAM,CAAC;QAET,KAAK,CAAC,IAAI,CACR,cAAc,UAAU,CAAC,MAAM,yBAAyB,cAAc,qBAAqB,cAAc,wBAAwB,CAClI,CAAC;QAEF,MAAM,YAAY,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;QACnC,IAAI,YAAY,EAAE,CAAC;YACjB,KAAK,CAAC,IAAI,CACR,wBAAwB,YAAY,CAAC,IAAI,MAAM,YAAY,CAAC,UAAU,gBAAgB,YAAY,CAAC,UAAU,eAAe,CAC7H,CAAC;QACJ,CAAC;IACH,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC,8DAA8D,CAAC,CAAC;IAC7E,CAAC;IAED,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,uBAAuB,CAAC,CAAC,MAAM,CAAC;QACtF,MAAM,YAAY,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC,MAAM,CAAC;QAEjF,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;YACjB,KAAK,CAAC,IAAI,CAAC,WAAW,QAAQ,0CAA0C,CAAC,CAAC;QAC5E,CAAC;QACD,IAAI,YAAY,GAAG,CAAC,EAAE,CAAC;YACrB,KAAK,CAAC,IAAI,CAAC,cAAc,YAAY,8BAA8B,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;IAED,IAAI,WAAW,CAAC,aAAa,GAAG,EAAE,EAAE,CAAC;QACnC,KAAK,CAAC,IAAI,CACR,mBAAmB,WAAW,CAAC,aAAa,eAAe,WAAW,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACvH,CAAC;IACJ,CAAC;IAED,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,MAAM,QAAQ,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACpE,KAAK,CAAC,IAAI,CAAC,mBAAmB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACxD,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACzB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,OAAgB,EAChB,eAA0B,EAC1B,SAAoC,EAAE;IAMtC,MAAM,UAAU,GAAqB;QACnC,GAAG,yBAAyB;QAC5B,GAAG,MAAM;QACT,MAAM,EAAE,KAAK;QACb,aAAa,EAAE,CAAC;KACjB,CAAC;IAEF,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,oBAAoB,CAC/C,CAAC,OAAO,EAAE,GAAG,eAAe,CAAC,EAC7B,EAAE,EACF,EAAE,EACF,UAAU,CACX,CAAC;IAEF,MAAM,YAAY,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;IAE/E,MAAM,cAAc,GAAG,UAAU;SAC9B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;SAChD,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC;SAC5B,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,KAAK,OAAO,CAAC,EAAE,CAAC,CAAC;IAErC,IAAI,aAAa,GAA8B,KAAK,CAAC;IACrD,IAAI,OAAO,CAAC,UAAU,GAAG,EAAE;QAAE,aAAa,GAAG,MAAM,CAAC;SAC/C,IAAI,OAAO,CAAC,UAAU,GAAG,EAAE,IAAI,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC;QAAE,aAAa,GAAG,QAAQ,CAAC;IAE7F,OAAO;QACL,YAAY;QACZ,cAAc,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,CAAC;QAC5C,aAAa;KACd,CAAC;AACJ,CAAC"}
|
|
@@ -0,0 +1,27 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Antagonist Remediation Prioritizer
|
|
3
|
+
*
|
|
4
|
+
* Prioritizes findings based on:
|
|
5
|
+
* 1. Attack surface reduction (blocks most narratives)
|
|
6
|
+
* 2. Bottleneck findings (appear in multiple chains)
|
|
7
|
+
* 3. Effort vs. impact trade-offs
|
|
8
|
+
*
|
|
9
|
+
* @module agents/antagonist/prioritizer
|
|
10
|
+
*/
|
|
11
|
+
import type { Finding } from "../../certification/types.js";
|
|
12
|
+
import type { AttackNarrative, PrioritizedRemediation } from "./types.js";
|
|
13
|
+
/**
|
|
14
|
+
* Generate prioritized remediation list
|
|
15
|
+
*/
|
|
16
|
+
export declare function prioritizeRemediations(findings: Finding[], narratives: AttackNarrative[]): PrioritizedRemediation[];
|
|
17
|
+
/**
|
|
18
|
+
* Calculate overall prioritization metrics
|
|
19
|
+
*/
|
|
20
|
+
export declare function calculatePrioritizationMetrics(prioritizations: PrioritizedRemediation[], narratives: AttackNarrative[]): {
|
|
21
|
+
totalFindings: number;
|
|
22
|
+
criticalPathFindings: number;
|
|
23
|
+
quickWins: number;
|
|
24
|
+
estimatedEffort: string;
|
|
25
|
+
topThreeImpact: string;
|
|
26
|
+
};
|
|
27
|
+
//# sourceMappingURL=prioritizer.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"prioritizer.d.ts","sourceRoot":"","sources":["../../../src/agents/antagonist/prioritizer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAY,MAAM,8BAA8B,CAAC;AACtE,OAAO,KAAK,EAAE,eAAe,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAkF1E;;GAEG;AACH,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,OAAO,EAAE,EACnB,UAAU,EAAE,eAAe,EAAE,GAC5B,sBAAsB,EAAE,CAsE1B;AAuCD;;GAEG;AACH,wBAAgB,8BAA8B,CAC5C,eAAe,EAAE,sBAAsB,EAAE,EACzC,UAAU,EAAE,eAAe,EAAE,GAC5B;IACD,aAAa,EAAE,MAAM,CAAC;IACtB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;IACxB,cAAc,EAAE,MAAM,CAAC;CACxB,CA+BA"}
|